@dsh-workbench/shared 0.1.9 → 0.1.11

package/dist/i18n/merge.js

@@ -38,3 +38,25 @@ export function mergeMessages(base, contributions) {
     }
     return { zh, en };
 }
+function reasonOf(error) {
+    if (error instanceof Error)
+        return error.message;
+    return typeof error === 'string' ? error : String(error);
+}
+export function mergeMessagesSkipping(base, contributions) {
+    let dictionaries = base;
+    const accepted = [];
+    const problems = [];
+    for (const item of contributions) {
+        if (item.messages === undefined)
+            continue;
+        try {
+            dictionaries = mergeMessages(base, [...accepted, item]);
+            accepted.push(item);
+        }
+        catch (error) {
+            problems.push({ unit: item.unit, reason: reasonOf(error) });
+        }
+    }
+    return { dictionaries, problems };
+}

package/dist/i18n/zh.d.ts

@@ -7,6 +7,20 @@ export declare const zh: {
     readonly 'project.none': "未选择项目";
     readonly 'project.empty': "还没有项目。用下面的「添加项目」选一个目录。";
     readonly 'project.add': "添加项目…";
+    readonly 'project.search.label': "搜索工作区";
+    readonly 'project.search.placeholder': "搜索工作区（目录名 / 中文名 / 路径）";
+    readonly 'project.search.empty': "没有匹配「{query}」的工作区。";
+    readonly 'project.rename.row': "改「{name}」的中文名";
+    readonly 'project.rename.current': "改当前工作区的中文名…";
+    readonly 'project.rename.title': "给「{name}」配一个中文名";
+    readonly 'project.rename.description': "显示在目录名后面。改的是工作区本身的名字。";
+    readonly 'project.rename.field': "中文名";
+    readonly 'project.rename.placeholder': "例如：工作台外壳";
+    readonly 'project.rename.hint': "留空 = 只显示目录名";
+    readonly 'project.rename.save': "保存";
+    readonly 'project.rename.saving': "保存中…";
+    readonly 'project.rename.cancel': "取消";
+    readonly 'project.rename.failed': "改名失败了，再试一次。";
     readonly 'session.new': "新会话";
     readonly 'session.new.label': "在当前项目新建会话";
     readonly 'session.empty': "这个项目还没有会话。";
@@ -30,11 +44,13 @@ export declare const zh: {
     readonly 'panels.enabled': "这个项目已启用";
     readonly 'panels.disabled': "这个项目未启用";
     readonly 'panels.choose': "选择模块";
+    readonly 'panels.buildModule': "造一个模块";
     readonly 'panels.failed': "改配置失败了，再试一次。";
     readonly 'panels.hintEffect': "停用 = agent 拿不到相关数据";
     readonly 'panels.dragHint': "拖动调整顺序";
     readonly 'panels.unknownStep': "这一层没有套件提供";
     readonly 'panels.labelWithHint': "{label}（{hint}）";
+    readonly 'panels.dep.failed': "⚠ 起不来";
     readonly 'panels.dep.missingPlugin': "⚠ 还没装好";
     readonly 'panels.dep.missingCommands': "⚠ 需要更新";
     readonly 'panels.dep.unchecked': "⚠ 检测不了";
@@ -228,6 +244,8 @@ export declare const zh: {
     readonly 'blocker.exec.hint': "确认 opencli 已安装且在 PATH 里（which opencli）。";
     readonly 'blocker.unknown.title': "出了点问题";
     readonly 'panels.reading': "正在读取面板配置…";
+    readonly 'panels.cardBroken': "这个模块起不来：{unit}（{reason}）";
+    readonly 'panels.cardRetry': "重试";
     readonly 'panels.empty': "面板里还没有模块";
     readonly 'panels.emptyHint': "也可以直接跟 agent 说：「把某个模块加到面板」。";
     readonly 'env.title': "准备工作台";
@@ -266,6 +284,8 @@ export declare const zh: {
     readonly 'env.step.warm': "预热站点登录态";
     readonly 'env.warm.done': "已预热 {n} 个站点";
     readonly 'env.warm.short': "这次没热上 —— 不影响用，面板第一次读取会自己补";
+    readonly 'env.unit.failed': "这个模块起不来";
+    readonly 'env.unit.failedHint': "它自己装配时报了错，别的模块不受影响。";
     readonly 'env.unit.missingPlugin': "这个模块还没装好";
     readonly 'env.unit.missingCommandsHint': "更新之后就能用了。";
     readonly 'env.unit.unchecked': "检测不了：拿不到执行通道";

package/dist/i18n/zh.js

@@ -7,6 +7,20 @@ export const zh = {
     'project.none': '未选择项目',
     'project.empty': '还没有项目。用下面的「添加项目」选一个目录。',
     'project.add': '添加项目…',
+    'project.search.label': '搜索工作区',
+    'project.search.placeholder': '搜索工作区（目录名 / 中文名 / 路径）',
+    'project.search.empty': '没有匹配「{query}」的工作区。',
+    'project.rename.row': '改「{name}」的中文名',
+    'project.rename.current': '改当前工作区的中文名…',
+    'project.rename.title': '给「{name}」配一个中文名',
+    'project.rename.description': '显示在目录名后面。改的是工作区本身的名字。',
+    'project.rename.field': '中文名',
+    'project.rename.placeholder': '例如：工作台外壳',
+    'project.rename.hint': '留空 = 只显示目录名',
+    'project.rename.save': '保存',
+    'project.rename.saving': '保存中…',
+    'project.rename.cancel': '取消',
+    'project.rename.failed': '改名失败了，再试一次。',
     'session.new': '新会话',
     'session.new.label': '在当前项目新建会话',
     'session.empty': '这个项目还没有会话。',
@@ -30,11 +44,13 @@ export const zh = {
     'panels.enabled': '这个项目已启用',
     'panels.disabled': '这个项目未启用',
     'panels.choose': '选择模块',
+    'panels.buildModule': '造一个模块',
     'panels.failed': '改配置失败了，再试一次。',
     'panels.hintEffect': '停用 = agent 拿不到相关数据',
     'panels.dragHint': '拖动调整顺序',
     'panels.unknownStep': '这一层没有套件提供',
     'panels.labelWithHint': '{label}（{hint}）',
+    'panels.dep.failed': '⚠ 起不来',
     'panels.dep.missingPlugin': '⚠ 还没装好',
     'panels.dep.missingCommands': '⚠ 需要更新',
     'panels.dep.unchecked': '⚠ 检测不了',
@@ -228,6 +244,8 @@ export const zh = {
     'blocker.exec.hint': '确认 opencli 已安装且在 PATH 里（which opencli）。',
     'blocker.unknown.title': '出了点问题',
     'panels.reading': '正在读取面板配置…',
+    'panels.cardBroken': '这个模块起不来：{unit}（{reason}）',
+    'panels.cardRetry': '重试',
     'panels.empty': '面板里还没有模块',
     'panels.emptyHint': '也可以直接跟 agent 说：「把某个模块加到面板」。',
     'env.title': '准备工作台',
@@ -266,6 +284,8 @@ export const zh = {
     'env.step.warm': '预热站点登录态',
     'env.warm.done': '已预热 {n} 个站点',
     'env.warm.short': '这次没热上 —— 不影响用，面板第一次读取会自己补',
+    'env.unit.failed': '这个模块起不来',
+    'env.unit.failedHint': '它自己装配时报了错，别的模块不受影响。',
     'env.unit.missingPlugin': '这个模块还没装好',
     'env.unit.missingCommandsHint': '更新之后就能用了。',
     'env.unit.unchecked': '检测不了：拿不到执行通道',

package/dist/index.d.ts

@@ -14,6 +14,7 @@ export * from './components/Activity.js';
 export * from './components/ApprovalDetail.js';
 export * from './components/ApprovalPlan.js';
 export * from './components/Card.js';
+export * from './components/CardBoundary.js';
 export * from './components/CardHead.js';
 export * from './components/ChoiceGroup.js';
 export * from './components/LongTaskRow.js';

package/dist/index.js

@@ -14,6 +14,7 @@ export * from './components/Activity.js';
 export * from './components/ApprovalDetail.js';
 export * from './components/ApprovalPlan.js';
 export * from './components/Card.js';
+export * from './components/CardBoundary.js';
 export * from './components/CardHead.js';
 export * from './components/ChoiceGroup.js';
 export * from './components/LongTaskRow.js';

package/dist/lib/react.d.ts

@@ -1,6 +1,7 @@
 import type * as ReactTypes from 'react';
 export declare const h: typeof ReactTypes.createElement;
 export declare const Fragment: ReactTypes.ExoticComponent<ReactTypes.FragmentProps>;
+export declare const Component: typeof ReactTypes.Component;
 export declare const useState: typeof ReactTypes.useState;
 export declare const useEffect: typeof ReactTypes.useEffect;
 export declare const useLayoutEffect: typeof ReactTypes.useLayoutEffect;

package/dist/lib/react.js

@@ -1,6 +1,7 @@
 const react = require('react');
 export const h = react.createElement;
 export const Fragment = react.Fragment;
+export const Component = react.Component;
 export const useState = react.useState;
 export const useEffect = react.useEffect;
 export const useLayoutEffect = react.useLayoutEffect;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dsh-workbench/shared",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "工作台与模块共享的纯代码与契约类型：类型、纯逻辑、哑组件、平台解析。宿主侧的东西从 /host 进（不影响浏览器产物）。",
   "license": "MIT",
   "type": "module",

package/src/api/__tests__/blocker-table.test.ts

@@ -141,6 +141,19 @@ describe('blockerOfCapability', () => {
     expect(blockerOfCapability(capability({ status: 'ok', plugin: 'coding' }), t)).toBeUndefined();
   });
 
+  it('★ 起不来（模块自己装配炸了）→ 只说"起不来" + 把宿主给的原因原样附上，不给装/卸的按钮', () => {
+    const blocker = blockerOfCapability(
+      capability({ status: 'failed', detail: '模块自己的 bug：kit.components.StateBlock 取不到' }),
+      t,
+    );
+
+    expect(blocker?.id).toBe('unit-mount-failed');
+    expect(blocker?.title).toBe('env.unit.failed');
+    expect(blocker?.detail).toBe('模块自己的 bug：kit.components.StateBlock 取不到');
+    expect(blocker?.hint).toBe('env.unit.failedHint');
+    expect(blocker?.actions.map((action) => action.kind)).toEqual(['retry']);
+  });
+
   it('★ 没装好 → 标题只说"这个模块还没装好"，**不点名插件**（用户不认识插件）', () => {
     const blocker = blockerOfCapability(
       capability({

package/src/api/blocker-table.ts

@@ -122,6 +122,17 @@ export function blockerOfCapability(capability: CapabilityPayload, t: Translate)
     ...(capability.command === undefined || sourceUnknown ? [] : [copyAction(t, capability.command)]),
   ];
 
+  if (capability.status === 'failed') {
+    return {
+      id: 'unit-mount-failed',
+      severity: 'block',
+      title: t('env.unit.failed'),
+      hint: t('env.unit.failedHint'),
+      ...(capability.detail === undefined ? {} : { detail: capability.detail }),
+      actions: [retryAction(t)],
+    };
+  }
+
   if (capability.status === 'missing-plugin') {
     return {
       id: 'unit-missing-plugin',

package/src/api/dsh-client.ts

@@ -113,8 +113,15 @@ export interface DshUiWorkspace {
   pickDirectory(): Promise<string | null>;
 }
 
+export interface DshWorkspaceWritten {
+  readonly workspaceId?: string;
+  readonly title?: string;
+}
+
 export interface DshWorkspaces {
-  create(request: { path: string }): Promise<{ workspaceId?: string } | undefined>;
+  readonly list: DshObservable<WorkspaceSnapshot>;
+  create(request: { path: string }): Promise<DshWorkspaceWritten | undefined>;
+  rename(workspaceId: string, title: string): Promise<DshWorkspaceWritten>;
 }
 
 export interface DshReferenceInsert {
@@ -161,6 +168,12 @@ export interface DshConversationService {
 export interface DshSessionsService {
   readonly list: { getSnapshot(): SessionsSnapshot };
   scope(sessionId: string): unknown | undefined;
+  create?(request: {
+    readonly workspaceId?: string;
+    readonly sessionId?: string;
+    readonly cwd?: string;
+    readonly agentPreset?: string;
+  }): Promise<unknown>;
 }
 
 export interface DshObservable<T> {
@@ -176,6 +189,18 @@ export interface DshSidebarRight {
   openTab(kind: string, options?: unknown): void;
 }
 
+export interface DshSessionsRemote {
+  create(request: {
+    readonly workspaceId?: string;
+    readonly cwd?: string;
+    readonly agentPreset?: string;
+  }): Promise<{ readonly sessionId: string }>;
+}
+
+export interface DshClientRemote {
+  readonly sessions: DshSessionsRemote;
+}
+
 export interface DshClientContext {
   get<T = unknown>(name: string): T | undefined;
   provide(name: string, value: unknown): void;
@@ -186,4 +211,5 @@ export interface DshClientContext {
   readonly uiWorkspace: DshUiWorkspace;
   readonly workspaces: DshWorkspaces;
   readonly shortcuts: DshShortcutCatalog;
+  readonly remote: DshClientRemote;
 }

package/src/api/dsh.ts

@@ -102,6 +102,7 @@ export interface DshHostContext {
   get<T = unknown>(name: string): T | undefined;
   provide(name: string, value: unknown): () => void;
   effect(effect: () => void | (() => void), label?: string): () => void;
+  inject(names: readonly string[], effect: (scoped: DshHostContext) => void): () => void;
   readonly logger?: DshLogger;
   readonly webServer: { register(route: DshWebRoute): () => void };
 }
@@ -130,8 +131,12 @@ export interface DshShell {
 
 export interface DshWorkspaceRegistry {
   get(id: string): { id: string; path?: string; title?: string } | undefined;
+  resolveByPath(path: string): Promise<{ readonly id: unknown } | undefined>;
+  create(path: string, title?: string): Promise<{ id?: string; path?: string; title?: string } | undefined>;
 }
 
+export type DshHomePath = (relative: string) => string;
+
 export interface DshToolDefinition {
   name: string;
   description: string;

package/src/api/workbench-contract.ts

@@ -21,7 +21,7 @@ export interface PluginStatePayload {
 
 export interface CapabilityPayload {
   readonly unit: string;
-  readonly status: 'ok' | 'missing-commands' | 'missing-plugin' | 'unchecked';
+  readonly status: 'ok' | 'failed' | 'missing-commands' | 'missing-plugin' | 'unchecked';
   readonly plugin?: string;
   readonly required: readonly string[];
   readonly missing: readonly string[];

package/src/components/ApprovalDetail.tsx

@@ -2,6 +2,7 @@ import type { Translate } from '../api/dsh-client.js';
 import type { ApprovalInput, UnitClientFace } from '../components/board-module.js';
 import { h } from '../lib/react.js';
 import { CodeBlock } from '@deepseek-ai/dsh-client-ui-primitives';
+import { CardBoundary } from './CardBoundary.js';
 import './ApprovalDetail.css';
 
 interface ToolCallRoot {
@@ -53,7 +54,14 @@ export function ApprovalDetail(props: ApprovalDetailProps) {
   const command = typeof args.command === 'string' ? args.command : '';
 
   const owner = (props.units ?? []).find((face) => face.approval?.tools.includes(input.tool) === true);
-  if (owner?.approval !== undefined) return <owner.approval.render input={input} t={t} />;
+  if (owner?.approval !== undefined) {
+    const Render = owner.approval.render;
+    return (
+      <CardBoundary unit={owner.manifest.id} resetKey={props.callId ?? ''} t={t}>
+        <Render input={input} t={t} />
+      </CardBoundary>
+    );
+  }
 
   if (command === '') return null;
   return (

package/src/components/CardBoundary.tsx

@@ -0,0 +1,56 @@
+import { Button } from '@deepseek-ai/dsh-client-ui-primitives';
+import type { Translate } from '../api/dsh-client.js';
+import type { ReactNode } from '../lib/react.js';
+import { Component, h } from '../lib/react.js';
+import { Note } from './Note.js';
+
+export interface CardBoundaryProps {
+  readonly unit: string;
+  readonly resetKey: string;
+  readonly t: Translate;
+  readonly children?: ReactNode | undefined;
+}
+
+export interface CardBoundaryState {
+  readonly reason: string | null;
+}
+
+export function errorReasonOf(error: unknown): string {
+  if (error instanceof Error) return error.message;
+  return typeof error === 'string' ? error : JSON.stringify(error) ?? String(error);
+}
+
+export class CardBoundary extends Component<CardBoundaryProps, CardBoundaryState> {
+  override state: CardBoundaryState = { reason: null };
+
+  static getDerivedStateFromError(error: unknown): CardBoundaryState {
+    return { reason: errorReasonOf(error) };
+  }
+
+  override componentDidCatch(error: unknown): void {
+    console.error(`[dsh-workbench] 模块 ${this.props.unit} 渲染失败：${errorReasonOf(error)}`, error);
+  }
+
+  override componentDidUpdate(previous: CardBoundaryProps): void {
+    if (previous.resetKey !== this.props.resetKey && this.state.reason !== null) {
+      this.setState({ reason: null });
+    }
+  }
+
+  private readonly retry = (): void => {
+    this.setState({ reason: null });
+  };
+
+  override render(): ReactNode {
+    const { reason } = this.state;
+    if (reason === null) return this.props.children;
+    return (
+      <Note tone="problem">
+        <span>{this.props.t('panels.cardBroken', { unit: this.props.unit, reason })}</span>{' '}
+        <Button type="button" variant="outline" size="sm" onClick={this.retry}>
+          {this.props.t('panels.cardRetry')}
+        </Button>
+      </Note>
+    );
+  }
+}

package/src/host/tool-approval.ts

@@ -22,222 +22,76 @@ export interface ApprovalCall {
   readonly workspace?: string | undefined;
 }
 
+export type ApprovalVerdict =
+  | { readonly kind: 'read' }
+  | {
+      readonly kind: 'ask';
+      readonly reason: string;
+      readonly question: ApprovalDetail;
+      readonly fallback: ApprovalDetail;
+    };
+
+export type ApprovalPolicy = (call: ApprovalCall) => ApprovalVerdict | undefined;
+
 export interface ApprovalContext {
-  readonly titleOf?: ((id: string) => string | undefined) | undefined;
   readonly writes?: boolean | undefined;
+  readonly policy?: ApprovalPolicy | undefined;
   readonly detailOf?:
     | ((call: ApprovalCall) => ApprovalFacts | undefined | Promise<ApprovalFacts | undefined>)
     | undefined;
 }
 
+function messageOf(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
 function compose(
   detail: ApprovalDetail | undefined,
-  texts: { readonly generic: ApprovalDetail; readonly question: ApprovalDetail },
+  verdict: { readonly question: ApprovalDetail; readonly fallback: ApprovalDetail },
 ): ApprovalDetail {
-  if (detail === undefined || typeof detail.zh !== 'string' || detail.zh.trim() === '') return texts.generic;
-  return { en: `${detail.en} — ${texts.question.en}`, zh: `${detail.zh} —— ${texts.question.zh}` };
-}
-
-function actionOf(call: ApprovalCall): { action?: string; id?: string } {
-  const raw = call.arguments;
-  if (typeof raw !== 'object' || raw === null) return {};
-  const value = raw as { action?: unknown; id?: unknown; unit?: unknown };
+  if (detail === undefined || typeof detail.zh !== 'string' || detail.zh.trim() === '') {
+    return verdict.fallback;
+  }
   return {
-    ...(typeof value.action === 'string' ? { action: value.action } : {}),
-    ...(typeof value.id === 'string' ? { id: value.id } : typeof value.unit === 'string' ? { id: value.unit } : {}),
-  };
-}
-
-const READ_ONLY_ACTIONS = new Set(['list', '']);
-
-interface AskSpec {
-  readonly reason: string;
-  readonly generic: ApprovalDetail;
-  readonly question: ApprovalDetail;
-}
-
-type CallEffect =
-  | { readonly kind: 'ask'; readonly spec: AskSpec }
-  | { readonly kind: 'read' }
-  | { readonly kind: 'unknown' };
-
-const READ: CallEffect = { kind: 'read' };
-const UNKNOWN: CallEffect = { kind: 'unknown' };
-
-function ask(spec: AskSpec): CallEffect {
-  return { kind: 'ask', spec };
-}
-
-function confirmed(call: ApprovalCall): boolean | undefined {
-  const raw = call.arguments;
-  if (typeof raw !== 'object' || raw === null) return undefined;
-  const value = (raw as { confirm?: unknown }).confirm;
-  return typeof value === 'boolean' ? value : undefined;
-}
-
-function effectOf(call: ApprovalCall, context: ApprovalContext): CallEffect {
-  const name = call.name ?? '';
-  const { action, id } = actionOf(call);
-  const readAction = action !== undefined && action !== '' && READ_ONLY_ACTIONS.has(action);
-
-  const what = (): string => {
-    if (id === undefined || id === '') return '一个模块';
-    return `「${context.titleOf?.(id) ?? id}」`;
+    en: `${detail.en} — ${verdict.question.en}`,
+    zh: `${detail.zh} —— ${verdict.question.zh}`,
   };
-
-  if (name === 'workbench_cmdb_release') {
-    if (confirmed(call) !== true) return READ;
-    return ask({
-      reason: 'confirm=true releases a version to a real environment',
-      generic: {
-        en: 'The agent wants to deploy a version for real (confirm: true) — it deploys on the platform (non-production). Allow?',
-        zh: 'agent 想在非生产环境上**真的部署一个版本**（confirm: true）—— 会在平台上部署。允许吗？',
-      },
-      question: {
-        en: 'it deploys on the platform for real (non-production). Allow?',
-        zh: '会在平台上真的部署一次（非生产环境）。允许吗？',
-      },
-    });
-  }
-
-  if (name === 'workbench_coding_issue_comment' || name === 'workbench_coding_issue_transfer') {
-    if (confirmed(call) !== true) return READ;
-    const comment = name === 'workbench_coding_issue_comment';
-    return ask({
-      reason: comment
-        ? 'confirm=true posts a comment on the platform'
-        : 'confirm=true moves an issue to another status on the platform',
-      generic: comment
-        ? {
-            en: 'The agent wants to post a comment on the platform for real (confirm: true) — it writes on the platform. Allow?',
-            zh: 'agent 想**真的给一条缺陷加评论**（confirm: true）—— 会写平台数据。允许吗？',
-          }
-        : {
-            en: 'The agent wants to move an issue to another status for real (confirm: true) — it writes on the platform. Allow?',
-            zh: 'agent 想**真的把一条缺陷流转到别的状态**（confirm: true）—— 会写平台数据。允许吗？',
-          },
-      question: comment
-        ? {
-            en: 'it posts that comment on the platform for real. Allow?',
-            zh: '会在平台上真的发表这条评论。允许吗？',
-          }
-        : {
-            en: 'it changes that issue status on the platform for real. Allow?',
-            zh: '会在平台上真的改这条缺陷的状态。允许吗？',
-          },
-    });
-  }
-
-  if (name === 'workbench_modules') {
-    if (readAction) return READ;
-    if (action === 'update-dependency') {
-      return ask({
-        reason: `workbench_modules update-dependency ${id ?? ''} upgrades a shared dependency on this machine`,
-        generic: {
-          en: `The agent wants to upgrade the shared dependency ${what()} (it changes what is installed on this machine). Allow?`,
-          zh: `agent 想升级共用依赖 ${what()}（会改这台机器上装的东西）。允许吗？`,
-        },
-        question: {
-          en: 'it upgrades that shared dependency on this machine. Allow?',
-          zh: `会升级共用依赖 ${what()}。允许吗？`,
-        },
-      });
-    }
-    const verb = action === 'install' ? '装' : action === 'uninstall' ? '卸载' : action === 'update' ? '更新' : '装 / 更新 / 卸载';
-    return ask({
-      reason: `workbench_modules ${action ?? '(unknown action)'} ${id ?? ''} changes plugins on this machine`.trim(),
-      generic: {
-        en: `The agent wants to ${verb === '装' ? 'install' : verb === '卸载' ? 'remove' : verb === '更新' ? 'update' : 'install/update/remove'} the module ${what()} (it changes plugins on this machine). Allow?`,
-        zh: `agent 想${verb}模块 ${what()}（会改这台机器上的插件）。允许吗？`,
-      },
-      question: {
-        en: 'it changes plugins on this machine. Allow?',
-        zh: '会改这台机器上的插件。允许吗？',
-      },
-    });
-  }
-
-  if (name !== 'workbench_panels') return UNKNOWN;
-
-  if (readAction) return READ;
-
-  if (action === 'hide') {
-    return ask({
-      reason: 'workbench_panels hide removes a module from the panel',
-      generic: {
-        en: `The agent wants to remove ${what()} from this project's panel (its agent tools go offline here too). Allow?`,
-        zh: `agent 想把 ${what()} 从这个项目的面板上收起来（这个项目里它的 agent 工具也一起下线）。允许吗？`,
-      },
-      question: {
-        en: 'it takes that module off this panel (its agent tools go offline here too). Allow?',
-        zh: `${what()}会从这个项目的面板上收起来（这个项目里它的 agent 工具也一起下线）。允许吗？`,
-      },
-    });
-  }
-  if (action === 'move') {
-    return ask({
-      reason: 'workbench_panels move reorders the panel',
-      generic: {
-        en: `The agent wants to reorder this project's panel (put ${what()} first). Allow?`,
-        zh: `agent 想调整这个项目面板的顺序（把 ${what()} 放前面）。允许吗？`,
-      },
-      question: {
-        en: `it reorders this panel (${what()} goes first). Allow?`,
-        zh: `会调整这个项目面板的顺序（${what()}放前面）。允许吗？`,
-      },
-    });
-  }
-  if (action === 'reset') {
-    return ask({
-      reason: 'workbench_panels reset clears the panel',
-      generic: {
-        en: "The agent wants to clear this project's panel (every module goes offline here). Allow?",
-        zh: 'agent 想清空这个项目的面板（所有模块在这个项目里都下线）。允许吗？',
-      },
-      question: {
-        en: 'it clears this panel (every module goes offline here). Allow?',
-        zh: '会清空这个项目的面板（所有模块在这个项目里都下线）。允许吗？',
-      },
-    });
-  }
-  return ask({
-    reason: `workbench_panels ${action ?? '(unknown action)'} changes the user's panel`,
-    generic: {
-      en: `The agent wants to add ${what()} to this project's panel. Allow?`,
-      zh: `agent 想把 ${what()} 加到**这个项目**的面板上。允许吗？`,
-    },
-    question: {
-      en: `it adds ${what()} to this project's panel. Allow?`,
-      zh: `会把 ${what()} 加到**这个项目**的面板上。允许吗？`,
-    },
-  });
 }
 
 export async function approvalFor(
   call: ApprovalCall,
   context: ApprovalContext = {},
 ): Promise<AskDecision | undefined> {
-  const effect = effectOf(call, context);
-  if (effect.kind === 'read') return undefined;
-  if (effect.kind === 'unknown') {
-    if (context.writes !== true) return undefined;
+  if (context.writes !== true) return undefined;
+
+  let verdict: ApprovalVerdict | undefined;
+  try {
+    verdict = context.policy?.(call);
+  } catch (error) {
+    return {
+      kind: 'deny',
+      reason: `问"要不要审批"的时候套件的策略抛了错，已经停下：${messageOf(error)}`,
+    };
+  }
+
+  if (verdict?.kind === 'read') return undefined;
+
+  if (verdict?.kind !== 'ask') {
     return {
       kind: 'deny',
       reason:
-        `${call.name ?? '这把工具'} 在清单里声明会写东西，但审批表没认领这次调用 —— 停下：` +
-        '给它在 tool-approval.ts 里补一条审批（含"这次会发生什么"），别让写静默过去',
+        `${call.name ?? '这把工具'} 在清单里声明会写东西，但它的套件没认领这次调用 —— 停下：` +
+        '在套件的 needsApproval 里补一条审批（含"这次会发生什么"），别让写静默过去',
     };
   }
-  const { spec } = effect;
 
   let facts: ApprovalFacts | undefined;
   try {
     facts = await context.detailOf?.(call);
   } catch (error) {
-    const why = error instanceof Error ? error.message : String(error);
-    return { kind: 'deny', reason: `拿不到"这次会发生什么"，已经停下：${why}` };
+    return { kind: 'deny', reason: `拿不到"这次会发生什么"，已经停下：${messageOf(error)}` };
   }
   if (facts !== undefined && 'blocked' in facts) return { kind: 'deny', reason: facts.blocked };
 
-  return { kind: 'ask', reason: spec.reason, displayReason: compose(facts, spec) };
+  return { kind: 'ask', reason: verdict.reason, displayReason: compose(facts, verdict) };
 }